Denial of Service Vulnerability in Symantec Web Security
CVE-2007-0564

Currently unrated

Key Information:

Vendor
Symantec
Status
Web Security
Vendor
CVE Published:
30 January 2007

Summary

The license registering interface in Symantec Web Security prior to version 3.0.1.85 has a vulnerability that allows attackers to disrupt service by submitting excessively large files. This leads to increased CPU consumption, potentially affecting the availability of the service for legitimate users. Administrators are advised to patch affected systems and monitor file upload limits to mitigate this risk.

References

http://securityresponse.symantec.com/avcenter/security/Co...
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/0330
vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/23896
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.